Privacy policy

2. What we collect

• Account data — name, email address, phone number, password (stored hashed), and profile photo if you upload one.
• Booking data — the vehicle, dates, pickup arrangement, and price of each booking, plus any damage reports and photos you submit.
• Payment data — deposits are processed by Stripe. We receive a payment reference and status; we do not store your full card number.
• Messages — the content of chats between riders and hosts, so we can deliver them and investigate disputes.
• Reviews — the ratings and text you publish about a booking.
• Technical data — IP address, device and browser information, and pages visited, used to operate and secure the Service.

3. Why we use it

• To create and administer your account;
• To take deposits, confirm bookings, and pass the details a host needs to hand over a vehicle;
• To send transactional messages — booking confirmations, reminders, cancellations, and review requests;
• To provide support and to investigate disputes, damage claims, and fraud;
• To meet legal, tax, and accounting obligations;
• To improve the Service and keep it secure.

We send marketing email only where you have opted in, and you can withdraw that consent at any time from your notification settings.

4. Who we share it with

• Hosts — when you book, the host receives the details needed to complete the rental, such as your name, contact number, and booking dates.
• Payment processor — Stripe, to take and refund deposits.
• Infrastructure and communications providers — hosting, email, SMS, push notification, and error-monitoring services acting on our instructions.
• Authorities — where we are legally required to disclose information, or to establish or defend legal claims.

We do not sell your personal data.

5. International transfers

Some of the providers above process data outside Thailand. Where that happens we rely on the safeguards available under the PDPA. The specific transfer mechanisms are part of the outstanding legal review.

6. How long we keep it

We keep account data while your account is open. Booking, payment, and dispute records are kept after that for as long as needed to meet tax, accounting, and legal obligations. Chat messages and reviews tied to a booking are retained with that booking record.

7. Your rights

Subject to the conditions in the PDPA, you may ask us to:

• Give you a copy of the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Delete your data, or close your account;
• Restrict or object to certain processing;
• Withdraw consent you have given, without affecting processing already carried out.

You can close your account from the BikeBee mobile app. Account deletion from the website is not yet available; until it is, email the privacy contact below and we will action the request. You also have the right to complain to the Personal Data Protection Committee.

8. Security

We use encryption in transit, hashed passwords, access controls, and audited infrastructure. No system is completely secure, so please use a strong, unique password and tell us promptly if you think your account has been accessed by someone else.

9. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes and contact

We will post any changes to this policy on this page and update the date at the top. For any privacy question or to exercise a right above: